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„ The MAILING DATE of this communication appears on the cover sheet with the correspondence address 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 

after SIX (6) MONTHS from the mailing date of this communication MnwTH<J f th mflilin _ date of this communication 

- If NO period for reply is specified above, the maximum statutory period w.ll apply and wi I expire SIX (6) MOHWfmm the ^ ^ a in 9 da ^ e of this commun.cat.on. 

- Failure to reply within the set or extended period for reply will, by statute, cause the appl.cat.on to become • A^NDONED (35 U.S.C § 1 ,33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

Responsive to commuriication(s) filed on 04 November 2007. 
2a)l3 This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) |2 Claim(s) 1-3.12-17.19.21 and 22 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) 13 Claim(s) 1-3.12-17. 19and21-22 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
1 1 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-1 52. 

Priority under 35 U.S.C. § 119 

12)D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 

a)Q All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 
2.D Certified copies of the priority documents have been received in Application No. 
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3.D Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 



Attach ment(s) 



D 
2) 
3) 



Notice of References Cited (PTO-892) 
Notice of Draftsperson's Patent Drawing Review (PTO-948) 
Information Disclosure Statement(s) (PTO/SB/08) 
Paper No(s)/Mail Date . 



4) Q Interview Summary (PTO-413) 

Paper No(s)/Mail Date. . 

5) ~~ 
6) 



Notice of Informal Patent Application 
Other: . 



U.S. Patent and Trademark Office 

PTOL-326 (Rev. 08-06) 



Office Action Summary 



Part of Paper No./Mail Date 200801 15 



Application/Control Number: P a 9 e 2 

09/884,311 
Art Unit: 2132 

Response to Amendment 

Applicant's arguments have been fully considered but are not persuasive. Applicant 
argues "It should be noted that claim 1 of the present application recites three specific 
active entities: (1) a first data user that requests personally identifiable information from 
(2) a data subject, and (3) a second data user that requests the personally identifiable 
information for the data subject (2) from the first data user (1). The rules define if and 
how the personally identifiable information (about the data subject (2)) may be provided, 
by the first data user (1), to the second data user (3)." 

However, the claims in fact only specify that "said rules define if and how said 
personally defined information may be provided, by said first data user, to said second 
data user." This is the case for any user requesting personally identifiable information 
form any user which is disclosed'in the Benantar reference. The claims do not link the 
original data set first requested by the first user to the transmission of that data set to 
the third user. All references to personally identifiable information are generic and, 
under a broad but reasonable interpretation the data set requested by the third entity is 
any data and not the one argued by Applicant. 

1 The text of those sections of Title 35, U.S. Code not included in this action can 

be found in a prior Office action. 

Claim Objections - 37 CFR 1.75 
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Claims 15, 16, and 22 are objected to 37 CFR 1.75(d)1 because the claimed "computer 
recordable" term is not defined in the specification and therefore the claim term lacks 
antecedent basis in the specification 

No new matter should be introduced into the specification to address this issue. 
Applicant should clearly indicate where support for the term is found in the original 
disclosure. 



Claim Rejections - 35 USC § 102 

Claims 1, 2, 12, 13, 15, and 16 are rejected under 35 U.S.C. 102(b) as being anticipated 

by Benantar et al. (U.S. Pat. No. 5,787,427). 
With respect to claims 1, 12, and 15: The Benantar reference describes an 
object-oriented system that provides security for objects by grouping objects that share 
common control access policies. 

A method, in a data processing system, for handling personally identifiable information, 

said method comprising: . 
providing in a computer, a first set of object classes representing active entities in an 
information-handling process, wherein a limited number of privacy-related actions 
represent operations performed on data and wherein each of the active entities is a 
human being or legal entity [ see Figure 4, Object Group I]; 

providing in said computer, a second set of object classes representing data and rules 
in said information-handling process, wherein at least one object class has said rules 
associated with said data, and wherein said data represents said personally identifiable 
information [see Figure 4, Object Group 2]; and 

processing transactions, in the data processing system, involving said personally 
identifiable information, using said computer and said first and second set of object 
classes so as to enforce a privacy policy, associated with the personally identifiable 
information and defined by said rules, against one or more active entities represented 
by said first set of object classes [ see column 3, lines 1-20], 
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wherein each of the one or more active entities represented by said first set of object 
classes is a human being or legal entity [ see column 3, lines 22-43] , wherein: 
a first active entity represented by a first object class in said first set of object classes is 
a first data user that requests said personally identifiable information from a data subject 
that is a second active entity represented by a second object class in said first set of 
objsct cl3ss©s 

said data subject is an active entity that is personally identifiable by said personally 
identifiable information; 

a third active entity represented by a third object class in said first set of object classes 
is a second data user that requests personally identifiable information from said first 
data user, and 

said rules define if and how said personally identifiable information may be provided, by 
said first data user, to said second data user [ see column 5, lines 35 -50]. 



Further reference is made to column 6, lines 48-53. 

Benantar discloses that the objects may represent various parties, see Figures 1 and 5, 
to address claims 2, 13, and 16. 



Claim Rejections - 35 USC § 103 

Claims 3, 14 and 17 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Benantar et al. in view of Tolopka et al. (U.S. Pat. No. 6,044,349). 
The Benantar reference does not disclose an object class representing a filled 
paper form. 

The secondary reference Tolopka teaches a storage medium for storing personal 
information that is subject to access control for apportion the data among authorized 
entities. Figure 2 shows various types of information and options for authorizing access 
to different groups. The information may represent a paper filled form, see column 6, 
lines 36-52. 
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It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to have the objects in Benantar represent paper filled forms as 
taught in Tolopka as a convenient manner of obtaining personal information and 
populating as an object, see column 6, lines 36-52. 



Claims 19, 21, and 22 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Benantar et al. (U.S. Pat. No. 5,787,427) in view of Gifford et al (U.S. Pat. No. 
5,614,927). 

The Benantar reference does not disclose transforming the personal information 

into a depersonalized format. 

The Gifford reference teaches protection of confidential information in a 
database. Column 8, lines 1-8, teaches a method where the correlation between public 
attributes and private attributes are reduced by camouflaging or outright removing some 
data to depersonalize the identifiable information based on rules. 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to have the data in the object groups in Benantar be 
depersonalized, i.e. camouflaged or removed, as taught tin Gifford in order to protect 
confidential information from being inferred from a database, see column 4, lines 17-68. 
2. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
. CFR 1.136(a). 
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A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed/and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Gilberto Barron Jr. whose telephone number is 571-272- 
3799. This Supervisor can normally be reached on Mondays thru Thursdays from 8 AM 
to 4:30 PM. This Supervisor can also be reached on alternate Fridays. 

The fax phone number for the organization where this application or proceeding 

is assigned is 571-273-8300. 
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